Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
morris
Contributor
Jump to solution

Configure Internet-Connection via SmartProvisioning Script

Hi there,

we need to configure the DMZ-Port as Internet-Connection with a static IP-Address.

I configured a static IP-Address via WebGUI. Internet-connection "Internet2" is configured with 192.168.1.1, but "show configuration" does not show this IP-Address.

set internet-connection "Internet2" type "pppoa" local-ipv4-address "auto" method "auto" idle-time "20"
set internet-connection "Internet2" auto-negotiation "on" link-speed "10/half" mtu "1500" mac-addr "default" vpi "0" vci "0" standard "adsl2+" encapsulation "llc"
set internet-connection "Internet2" type "cellular"
set internet-connection "Internet2" "probe-icmp-servers" first "8.8.8.8" second "8.8.4.4"
set internet-connection "Internet2" type "pppoa"
set internet-connection "Internet2" ha-priority "1" load-balancing-weight "10"
set internet-connection "Internet2" qos-upload "disable"
set internet-connection "Internet2" qos-download "disable"
set internet-connection "Internet2" connect-on-demand "false"
set internet-connection "Internet2" disable-nat "off"
set internet-connection "Internet2" "enable"

At this point I don't see a possibility to configure the DMZ-Port as Internet-Connection via CLI.

On the other hand I can configure the following:

set interface "DMZ" ipv4-address "192.168.1.1" mask-length "24"
set interface "DMZ" description "Uplink"
set interface "DMZ" state "on"

But that only changes the settings in the local network.

Is there a way to implemented an internet-connection via CLI?

Thank you,

Maurice

1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

To establish the secondary Internet connection over the CLI, you need to use the add internet-connection command.

When you use that command, you can specify the interface for the secondary interface (e.g. DMZ). 

There are some examples here: Check Point Zero-Touch User Guide 

View solution in original post

5 Replies
PhoneBoy
Admin
Admin

To establish the secondary Internet connection over the CLI, you need to use the add internet-connection command.

When you use that command, you can specify the interface for the secondary interface (e.g. DMZ). 

There are some examples here: Check Point Zero-Touch User Guide 

morris
Contributor

Hi Dameon,

thank you for your answer. That did work!

But I still asking myself, why the configured IP-Address won't show with "show configuration". Only in the WebGUI you can see the configured IP-Address in the "Internet-Connection".

0 Kudos
PhoneBoy
Admin
Admin

I assume it's a limitation of "show configuration".

It might be worth a ticket with the TAC to confirm.

0 Kudos
morris
Contributor

There is a "workaround":

Using "show internet-connection Internet1" instead of "show configuration" gets all information for one specific internet-connection.

0 Kudos
PhoneBoy
Admin
Admin

Thanks for sharing.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events